| 15 | 15 | - the {{{df077900}}} pointer is surrounded by other, similar values, in what appears to be an array of structs of size 32 bytes: you can see value {{{df077920}}}, {{{df077960}}} ..etc; the memory at address {{{df077920}}} ..etc, is located just below the "wanderer.." string and contains values like {{{801a9fe0}}}; assuming these are legit, this would validate the idea that there used to be a similar value on the three lines above, which were clobbered by the "wanderer.." string (and also the "tcp data" string..?), and the {{{df077900}}} pointer would just be innocent/legit: when it tried to access the pointer there to perform its stop-notifying() chore, the pointer was gone and replaced by 'T - ' instead, an ascii string. Trying to indirect it -> Boom. |
| 16 | 16 | - on the other hand, the "- The wanderer..." string seems to be just an strdup()ed string in the middle of other strdup()ed strings (suspiciously close to the bottom "edge" of that bunch of strings tho, but let's suspend disbelief), so maybe it is not out of place, and it is the {{{df077900}}} pointer which has gone bad, or even the whole set of pointers beside it on or about {{{df07c2d0}}} which are out of place. |
